My Solo Dive into the world of Atomic Red Team Testing

Short summary

A cybersecurity bootcamp student documents their first hands-on experience with Atomic Red Team testing, running MITRE ATT&CK technique simulations including account manipulation (T1098) and file deletion (T1070). The post walks through setting up a Wazuh SIEM-monitored workstation and executing tests via PowerShell, though the narrative is more personal journal than technical guide. Coverage is surface-level with missing screenshots and incomplete experiment walkthroughs.

• •Beginner walks through Atomic Red Team test setup with Wazuh SIEM monitoring
• •Experiments cover MITRE techniques T1098 (account manipulation) and T1070 (file deletion)
• •Personal learning journal format with limited technical depth and incomplete walkthroughs

Generated with AI, which can make mistakes.